/**
 * Injection Detection Engine
 *
 * Scans content against all 43 injection patterns and neutralizes threats
 * based on pattern action directives (strip, redact, escape).
 */
export interface DetectionResult {
    content: string;
    patterns_detected: string[];
    content_modified: boolean;
    metadata: {
        original_length: number;
        sanitized_length: number;
        detections_by_severity: {
            critical: number;
            high: number;
            medium: number;
            low: number;
        };
    };
}
export interface GlasswormDetection {
    detected: boolean;
    clusterCount: number;
    maxClusterSize: number;
    hasDecoderPattern: boolean;
    severity: 'critical' | 'high' | 'medium' | 'low';
}
/**
 * Detect and neutralize injection patterns in content
 */
export declare function detectAndNeutralize(content: string): DetectionResult;
/**
 * Get severity score for logging/monitoring
 */
export declare function getSeverityScore(detectionsBySeverity: DetectionResult['metadata']['detections_by_severity']): number;
/**
 * Check if content has critical threats
 */
export declare function hasCriticalThreats(detectionsBySeverity: DetectionResult['metadata']['detections_by_severity']): boolean;
/**
 * Detect Glassworm malware patterns
 *
 * Glassworm uses invisible Unicode Variation Selectors for steganographic payloads.
 * This detector identifies:
 * 1. Clusters of 3+ consecutive Unicode Variation Selectors
 * 2. The "decoder pattern": .codePointAt() near hex constants (0xFE00, 0xE0100)
 * 3. Marks clusters of 10+ characters as CRITICAL
 *
 * @param content - Content to scan
 * @returns GlasswormDetection result with severity assessment
 */
export declare function detectGlassworm(content: string): GlasswormDetection;
/**
 * Strip all Unicode Variation Selectors from content
 *
 * @param content - Content to sanitize
 * @returns Content with all variation selectors removed
 */
export declare function stripUnicodeVariationSelectors(content: string): string;
//# sourceMappingURL=injection-detector.d.ts.map